To workaround the CAP_SYS_NICE requirement, we can apply a kernel patch using the following NixOS configuration snippet:
CAP_SYS_NICE